Solved

oracle user security

Posted on 2015-01-08
4
195 Views
Last Modified: 2015-01-16
I have a reporting database which is refreshed every day from Production. Users like to keep their existing passwords and roles and privileges assigned to them. How this task can be achieved in Oracle 11g rel 2.

Elaborate: Production database :- CRDPRD  
                   Reporting database:-     CRDRPT  
Reporting database is refreshed every night from Production using RMAN backup and we have a cron script (shell script runs on the database) which runs everyday on the reporting database (CRDRPT)  after the refresh. The password and usernames are hard-coded with username and a common password to every users. All users have same role (read only) except a few which has update privileges also. Most users are created on the reporting database  (from the same shell script) as only some users are present in the Production environment.
The issue is if some users change  their passwords then the next day they will again be overwritten by the script with the default passwords. They want their passwords be retained unless they change it.
Please let me know the best way to achieve this task?
0
Comment
Question by:Oranew
  • 2
4 Comments
 
LVL 73

Assisted Solution

by:sdstuber
sdstuber earned 334 total points
ID: 40538107
you can simply copy the password columns from sys.user$  (password and spare4)

I don't mean select and update the sys table directly.  But select them from prod db, then construct alter user statements using those values.


for more information on how oracle stores passwords, see this article

http://www.experts-exchange.com/Database/Oracle/A_855-How-Oracle-Stores-Passwords.html
0
 
LVL 73

Assisted Solution

by:sdstuber
sdstuber earned 334 total points
ID: 40538108
or, use dbms_metadata to extract the user information including the password hashes and then use those to construct alter user statements on the reporting db
0
 
LVL 29

Accepted Solution

by:
MikeOM_DBA earned 166 total points
ID: 40538264
Do you have standby db?
Then you can avoid the daily re-fresh by creating a Zero Data Reporting Database
;)
0
 

Author Closing Comment

by:Oranew
ID: 40553805
I was looking something to construct a sql with the user role and the password and run it in the refresh instance.We have standby for the DR purposes but this reporting instance have different users than production and existing users also have different roles in production and reporting with different passwords. Great answers though !! Really appreaciate your help. But very good idea for the standby as well. I liked it.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Pl/SQL Query 31 76
return result by latest date - oracle query 21 69
Export table into csv file in oracle 10 43
Oracle 12c database link between pdb not working 20 42
Subquery in Oracle: Sub queries are one of advance queries in oracle. Types of advance queries: •      Sub Queries •      Hierarchical Queries •      Set Operators Sub queries are know as the query called from another query or another subquery. It can …
Truncate is a DDL Command where as Delete is a DML Command. Both will delete data from table, but what is the difference between these below statements truncate table <table_name> ?? delete from <table_name> ?? The first command cannot be …
Via a live example, show how to take different types of Oracle backups using RMAN.
This video explains what a user managed backup is and shows how to take one, providing a couple of simple example scripts.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now